Effective September 21, 2026

Privacy policy

LePan (乐盘) is a private file-management and backup app.

This policy covers the iOS and Android apps, bundle/package uk.inoku.lifedrive, and this support website. Earlier app versions may display the name LeDrive. Contact support for privacy questions or requests.

Your storage and who operates it

LePan connects to a compatible Leither node you choose. That node may be operated by you or by an administrator who invites you. Its operator controls stored files, access rights, retention and any replication to other nodes. The app developer does not automatically receive a copy of the files on independently operated nodes and cannot administer or erase those nodes for you.

Information the app handles

• Files and media: files, photos, videos, audio and documents you open, upload, share or select for backup, plus filenames, folder paths, sizes, dates, content identifiers and other embedded metadata.
• Photo metadata: original photo metadata can include where a photo was taken. On supported Android versions, the app asks for media-location access to preserve that metadata. It does not track your live device location.
• Identity and devices: node and user identifiers, cryptographic public keys, device identifiers, device names, permissions and profile information you choose to provide. These support authentication, pairing, access control and file operations.
• Local operational data: device credentials, settings, previews, cached listings, backup receipts, transfer progress and temporary copies used to resume uploads.
• Network information: your IP address and requested node identifier may be seen by the node and discovery services when the app finds or connects to your storage.

How the information is used

These data support file management, previews, optional backups, device pairing, authentication, user-requested sharing and recovery of interrupted transfers. The mobile apps contain no advertising or third-party analytics SDK and does not sell user data or use it for targeted advertising.

Permissions and your choices

• Photo and video access lets you select, upload or back up media. Automatic backup requires your opt-in and may run in the background.
• Folder access is granted through the system folder picker on iOS or Android. The app cannot read other apps’ private storage through that permission.
• Media-location permission preserves location metadata in original photos when permitted.
• On iOS, the optional Files integration exposes your selected drive through Apple’s Files app. Camera permission is used to scan pairing and sign-in QR codes; the app does not record camera footage for analytics.
• Notifications and system background-task indicators display transfer progress and status. Network access connects to your storage node; iOS local-network permission allows access to a nearby node.

You can change permissions in iOS or Android Settings, disable Auto sync, remove selected folders, stop sync, or forget the device from Settings.

Transfers and sharing

Files and relevant metadata are transmitted to your chosen node. Public node-discovery services, including services reached through lepan.org, receive network requests and the node identifier needed to find its address. Creating a share link or exporting a file makes content available to the recipient or other app you select. Node replication and copies made by recipients are controlled outside the mobile app.

Security

Saved identity credentials use iOS Keychain or encryption protected by Android Keystore. Supported household requests use authenticated encryption or a pinned HTTPS connection. Some discovery, legacy and direct file-access routes use HTTP, so LePan does not claim that all traffic or stored files are end-to-end encrypted. Security also depends on the node configuration and the network used. Protect your invitation files, private keys and share links.

Retention and deletion

Local caches, transfer state and settings remain while needed for the app’s operation. Forget this device removes its saved identity, stops its work and clears associated caches and transfer state. Uninstalling the app removes its private app-container data, but does not erase exported files or node copies. On iOS, Keychain credentials may survive reinstallation; use Forget this device before uninstalling to remove the saved identity. Android also provides app-storage clearing controls. Node files remain until removed according to that node’s controls and retention rules. Items in Trash may need permanent deletion. Copies already downloaded or replicated to independent recipients may remain.

See Delete your data for instructions and a contact method for deletion requests. The developer can help with support records it holds; requests concerning an independent node must also go to its operator.

Support and this website

If you email us, we receive your email address and the information you include. We use it to respond and resolve the request, retaining correspondence as needed for support, security or legal obligations. You can ask us to delete support correspondence. This static website has no advertising, analytics scripts or contact-form database. Cloudflare hosts the pages on lepan.org; GitHub Pages also hosts a version for existing app links. These hosting providers may process technical request data under Cloudflare’s privacy policy and GitHub’s privacy statement. Email is handled by the relevant email providers.

Children

LePan is a general storage utility intended for adults who manage their own storage or have permission to use a node. It is not directed to children.

Policy changes

Updates will be posted on this page with a new effective date. Contact the address above if you have questions about a change.